Bank of America has issued guidance to its customers explicitly warning against sharing banking passwords or credentials with AI assistants or agents, clarifying that the bank will not be liable for unauthorized activity that results from customer-initiated AI agent access to banking systems. This warning addresses a growing practice where users are attempting to connect AI tools to financial accounts to automate transactions and data retrieval.

The guidance underscores a critical gap in the current AI infrastructure: most AI assistant platforms lack secure, audited methods for connecting to financial systems, and sharing passwords directly with these tools creates significant security vulnerabilities. BofA's warning signals that major financial institutions will not absorb liability for breaches resulting from customer misuse of AI agents.

What This Means for Your Business

If you're considering deploying AI agents within your organization to automate financial or data tasks, do not allow them to access systems via shared credentials. Work with your IT and security teams to implement proper API-based integrations with audit logging and permission controls. Also brief employees that copying credentials into any AI tool—including ChatGPT or other consumer applications—violates security policy and creates liability that the organization, not the vendor, will bear.